$ rpki-client -vvf rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft File: IffNCqAWhDVSmHRj5kIpcu8DnOg.mft (raw, json) Hash identifier: IMkOhNgD7K+rQrDW75LeG8mS7X7R47+zChQXRo945ko= Subject key identifier: 03:1F:CB:CD:32:61:AC:DF:D1:24:3E:D5:62:EF:83:40:3A:51:7E:A3 Authority key identifier: 21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 Certificate issuer: /CN=A919710C/serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Certificate serial: 0499 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer Subject info access: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft Manifest number: 0490 Signing time: Sat 09 Aug 2025 00:30:44 +0000 Manifest this update: Sat 09 Aug 2025 00:30:44 +0000 Manifest next update: Sat 16 Aug 2025 00:30:44 +0000 Files and hashes: 1: IffNCqAWhDVSmHRj5kIpcu8DnOg.crl (hash: gfQPIWdCQ3vviAE+FoCL7+l/HkpIUOyWnPV/iWDEBfg=) 2: F47ED252878B11EEA8C62644C4F9AE02.roa (hash: FXBB9DdsLSCSLqmcy5GfEeeUEH9NAw4i9aMiOHO8iOI=) 3: E097013E910C11EFB994E187C4F9AE02.roa (hash: vrgdHN+EQa1Kq7q/Jj9Y5Q0FA9lEQE1lA2kxOo5yBEc=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 14 Aug 2025 05:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1177 (0x499) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A919710C, serialNumber=21F7CD0AA016843552987463E6422972EF039CE8 Validity Not Before: Aug 9 00:30:44 2025 GMT Not After : Aug 16 00:30:44 2025 GMT Subject: CN=689696b4-c941 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:7e:06:ca:4e:75:77:cc:f2:c0:98:1a:98:21: 01:f1:fb:f4:8d:7f:5e:3e:52:eb:38:08:a7:2e:84: 1d:c8:c3:d3:ca:35:bd:45:be:26:01:05:58:75:9f: 6d:fe:e7:af:aa:6d:56:19:62:1d:97:a4:2a:70:4b: 34:3f:50:bc:a3:5b:38:6d:8e:be:dd:f7:07:63:d0: 9d:57:a7:19:98:98:03:83:bc:be:53:6d:0f:99:7f: 3a:95:68:bb:b3:7e:c3:0c:c8:37:c9:f6:2c:47:9a: 06:88:98:14:b9:ce:81:e7:5d:3a:5b:1d:81:6d:e6: 8e:84:82:e6:25:95:de:d2:d4:9c:c5:80:63:2f:27: bc:18:83:e5:98:0c:26:3c:4c:9d:6f:25:8f:2e:3a: ca:82:60:ef:6d:4b:63:a5:a5:a4:f0:09:f8:97:6b: b8:24:0d:78:a6:95:19:dc:6c:e5:67:67:3f:e8:69: 79:73:f3:a3:d3:66:69:67:9f:1b:2d:e7:5a:f2:8e: cc:74:60:03:50:cf:d0:2b:31:f2:36:6b:b5:77:4b: 8e:76:ed:02:fb:b3:a9:3a:0b:14:2a:e1:2c:f9:69: 50:97:5a:72:99:ec:22:10:9e:45:be:b2:7e:18:eb: bf:2e:05:65:41:9b:52:a9:e7:88:42:96:d6:d8:c0: f3:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:1F:CB:CD:32:61:AC:DF:D1:24:3E:D5:62:EF:83:40:3A:51:7E:A3 X509v3 Authority Key Identifier: keyid:21:F7:CD:0A:A0:16:84:35:52:98:74:63:E6:42:29:72:EF:03:9C:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IffNCqAWhDVSmHRj5kIpcu8DnOg.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919710C/2F3676124B6011EC9554DC50C4F9AE02/IffNCqAWhDVSmHRj5kIpcu8DnOg.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 61:76:61:8f:be:15:88:3c:e7:09:bb:57:ed:6c:91:e7:d8:fc: fd:96:76:c0:8f:26:c4:d1:7f:a2:93:e8:9d:fc:0c:35:2b:be: 16:2d:22:2b:2e:c3:cd:87:44:15:9c:c9:d6:8f:93:b7:a7:62: 72:1a:de:6c:ab:5a:f2:5c:c5:20:3b:d3:34:d2:eb:c8:e6:9a: b8:42:75:c4:18:07:09:79:29:05:9f:63:e8:ec:da:c4:3e:f6: 92:de:d9:2f:95:ed:0e:d4:99:0f:39:f1:7c:da:08:08:1c:1a: a9:c5:38:b6:34:8f:9e:5f:2f:e4:68:f8:08:4d:0f:af:db:32: 1b:8b:a8:6f:31:d0:ac:4a:b7:8b:5f:6f:a4:3f:c7:a0:8f:d2: 14:83:01:53:8a:cb:a9:51:cc:aa:e7:3e:ce:e6:b5:f3:8c:f7: 15:6d:2a:21:50:e8:d1:80:00:23:48:ac:28:bb:41:be:ab:1a: 62:93:4c:c7:0c:93:33:d0:8d:e2:5c:25:8c:dd:13:9d:bb:56: de:9b:90:dd:25:a1:b3:2d:5c:a7:29:dd:a6:df:ca:90:fb:03: c3:8e:06:55:99:da:6d:21:4f:b0:23:40:7a:8c:60:0b:ba:20: b8:6a:6d:92:ba:4b:7c:a5:09:64:4e:5f:bb:60:3e:0c:f1:8b: 82:f1:c7:b5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBJkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OTcxMEMxMTAvBgNVBAUTKDIxRjdDRDBBQTAxNjg0MzU1Mjk4NzQ2M0U2NDIyOTcy RUYwMzlDRTgwHhcNMjUwODA5MDAzMDQ0WhcNMjUwODE2MDAzMDQ0WjAYMRYwFAYD VQQDEw02ODk2OTZiNC1jOTQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvn4Gyk51d8zywJgamCEB8fv0jX9ePlLrOAinLoQdyMPTyjW9Rb4mAQVYdZ9t /uevqm1WGWIdl6QqcEs0P1C8o1s4bY6+3fcHY9CdV6cZmJgDg7y+U20PmX86lWi7 s37DDMg3yfYsR5oGiJgUuc6B5106Wx2BbeaOhILmJZXe0tScxYBjLye8GIPlmAwm PEydbyWPLjrKgmDvbUtjpaWk8An4l2u4JA14ppUZ3GzlZ2c/6Gl5c/Oj02ZpZ58b Leda8o7MdGADUM/QKzHyNmu1d0uOdu0C+7OpOgsUKuEs+WlQl1pymewiEJ5FvrJ+ GOu/LgVlQZtSqeeIQpbW2MDz4wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFAMfy80y Yazf0SQ+1WLvg0A6UX6jMB8GA1UdIwQYMBaAFCH3zQqgFoQ1Uph0Y+ZCKXLvA5zo MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5NzEwQy8yRjM2NzYxMjRC NjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hEVlNtSFJqNWtJcGN1OERu T2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL0lmZk5DcUFXaERWU21IUmo1a0lwY3U4RG5PZy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5 NzEwQy8yRjM2NzYxMjRCNjAxMUVDOTU1NERDNTBDNEY5QUUwMi9JZmZOQ3FBV2hE VlNtSFJqNWtJcGN1OERuT2cubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBhdmGPvhWIPOcJu1ftbJHn2Pz9lnbAjybE0X+ik+id/Aw1K74WLSIr LsPNh0QVnMnWj5O3p2JyGt5sq1ryXMUgO9M00uvI5pq4QnXEGAcJeSkFn2Po7NrE PvaS3tkvle0O1JkPOfF82ggIHBqpxTi2NI+eXy/kaPgITQ+v2zIbi6hvMdCsSreL X2+kP8egj9IUgwFTisupUcyq5z7O5rXzjPcVbSohUOjRgAAjSKwou0G+qxpik0zH DJMz0I3iXCWM3ROdu1bem5DdJaGzLVynKd2m38qQ+wPDjgZVmdptIU+wI0B6jGAL uiC4am2Sukt8pQlkTl+7YD4M8YuC8ce1 -----END CERTIFICATE-----Generated at Sat Aug 9 23:08:48 2025 by rpki-client